Security Intelligence
CISA flags actively exploited Ray vulnerability
Confirmed active exploitation of CVE-2025-62593, a critical Ray flaw that can allow remote code execution on systems...
Security Intelligence
Power Pages misconfigurations expose D365 data
Researchers reported exploitation attempts targeting a max-severity SAP Commerce Cloud vulnerability just three days...
Security Intelligence
Active exploitation of SAP Commerce Cloud vulnerability
Researchers reported exploitation attempts targeting a max-severity SAP Commerce Cloud vulnerability just three days...
Security Intelligence
Early exploitation attempts observed of GeoServer zero day
A ne wGeoServer zero day is already attracting internet-wide scanning and exploitation attempts, with hundreds of...
Security Intelligence
Public PoC available for ClamAV vulnerabilities
Seven vulnerabilities in the ClamAV malware scanning engine affect Cisco Secure Endpoint Connector deployments on...
Security Intelligence
Adobe patches critical ColdFusion and Campaign Classic vulnerabilities
Updates available for multiple critical vulnerabilities in Adobe ColdFusion and Adobe Campaign Classic, several of...
Security Intelligence
LexisNexis investigates suspicious activity after taking services offline
LexisNexis detected unusual activity on servers hosted and managed by a third-party vendor, prompting the company to...
Security Intelligence
Cisco releases patches for 12 critical Catalyst SD-WAN & IOS XE flaws
Cisco has released multiple patches for vulnerabilities affecting Catalyst SD-WAN, IOS XE, and Integrated Management...
Security Intelligence
Technical details disclosed for a max-severity Paperclip vulnerability
Researchers disclosed technical details for three Paperclip vulnerabilities, highlighting the risks associated with AI...
Security Intelligence
Langflow vulnerability chain under active exploitation
Langflow OSS, an AI workflow platform that connects apps, data sources, and cloud services, is under active...
Security Intelligence
Active exploitation of N-able N-central authentication bypass flaw
N-able has disclosed and patched an authentication bypass vulnerability in its RMM platform that was actively exploited...
Security Intelligence
Critical TeamCity Vulnerability Exposes Software Development Pipelines
JetBrains patched CVE-2026-63077, a 9.8 CVSS flaw in TeamCity's agent polling protocol enabling unauthenticated remote...